Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What versions of Windows 7 support Bitlocker Drive Encryption?
1723
Enterprise and Ultimate versions. The limitation refers only to the ability to enable protection on a removable storage device. Once BitLocker To Go is added to a storage device - that device can be used normally with any version of Windows 7. It can
3389
IPsec to authenticate both the computer and user - allowing IT to manage the computer before the user logs on. Optionally - you can require a smart card for user authentication. It also leverages IPsec to provide encryption for communications across

2. What port does RDP use?
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.
Problem Steps Recorder in the Windows 7 operating system is a feature that enables users to record their interactions with an application and provide a detailed screen-by-screen view with accompanying information including mouse clicks and keyboard i
3389
All Programs - Windows Virtual PC - Windows XP Mode Applications. To run your application directly from the Windows 7 desktop - just go to your Start menu.

3. What is s stub zone?
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.
Contains a list of dynamically updated list of authorities for the zone.
Specify this file with both the ScanState and LoadState commands to migrate application settings to computers running Windows Vista or Windows 7.
Use it to generate an EFS user certificate

4. What wireless protocolls can be used to authenticate smart cards?
WPA2 and 802.1x but require EAP-TLS to be enable.
By the RRAS manager or from the command line. For the subnet you can either use the / command or the octet subnet. Example: Route -p add 192.168.1.0/24 192.168.1.1
Adds a file based zone
Does not have

5. What should you use for enhanced wireless security?
Use dnscmd /zonerefresh.
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.
Configure aging and scavenging.
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.

6. Windows firewall can be configured to ___________.
Use the net sh command to configure the proper ports for remote management.
This happens because the zone records expire. This occurs because the secondary zone has not successfully zone transferred before the "Expires After" SOA.
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
Drop both inbound and outbound traffic

7. What is DirectAccess?
Enterprise and Ultimate versions. The limitation refers only to the ability to enable protection on a removable storage device. Once BitLocker To Go is added to a storage device - that device can be used normally with any version of Windows 7. It can
The Application Identity Service
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
Distributed Cache mode. In this mode - local Windows 7 clients keep a copy of the content and make it available to other authorized clients that request the same data. This eliminates the need to have a server in the branch office. However - unlike H

8. What is a ns record?
They must be configured with the ip addresses of the radius server.
Internet Protocol security (IPsec) and Internet Protocol version 6 (IPv6).
Increase the minimum size of your paging file. Windows sets the initial minimum size of the paging file equal to the amount of random access memory (RAM) installed on your computer plus 300 megabytes (MB) - and the maximum size equal to three times t
It designates an authoritative DNS server - not the soa record.

9. What drive is System protection is automatically setup on?
No
For the drive that Windows is installed on. System protection can only be turned on for drives that are formatted using the NTFS file system.
Install Windows Installer Packages (.MSI) files. You can script the installation.
1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor - 1 gigabyte (GB) RAM (32-bit) or 2 GB RAM (64-bit) - 16 GB available hard disk space (32-bit) or 20 GB (64-bit) - DirectX 9 graphics device with WDDM 1.0 or higher driver

10. What can Windows 7 Enterprise can be directly upgraded to?
Verify that they are not within the scope of the dynamically assigned DHCP addresses.
Windows 7 Ultimate.
It backs up digitally identities to a password protected file.
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.

11. What does windows cardspace do?
Problem Steps Recorder in the Windows 7 operating system is a feature that enables users to record their interactions with an application and provide a detailed screen-by-screen view with accompanying information including mouse clicks and keyboard i
A processor that supports the hardware virtualization using either the AMD-V or Intel VT options. 256MB of RAM is dedicated to the XP client so the Windows 7 computer should have at least 2GB of overall RAM. Windows XP Mode is only available in Windo
It backs up digitally identities to a password protected file.
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.

12. What are the two primary offline scenarios enabled in USMT 4.0?
MSCHAP2 is user/password authentication while EAP-TLS is comuter authentication via certificate or smart card.
Creates a bootable CD that runs the Windows Recovery Environment (WRE)
Windows PE and Windows.old.
Windows 7 Professional.

13. What does AppLocker allows you to generate default rules for?
Windows 7 Enterprise and Ultimate Editions
If your computer is running slowly or isn't working properly - you can use System Restore to return your computer's system files and settings to an earlier point in time using a restore point. For more information about System Restore - see System Re
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
IPSEC

14. How can non Microsoft PCs connect to print services?
Print services for unix can be configured to share out with the LPD (Line Printer Daemon) and clients send print jobs to LPD using LPR (Line printer remote) client software.
To another hard disk in the same computer - network or to removable media.
NMCAP. You can initiate a packet capture and make a .cap file to replay later. It allows you to accept a .cap files as input useful in parsing traffic by different ports or ip address. Example: NMCap /inputcapture test.cap /capture IPV4.Address ==10.
It improves performance

15. What can In-Private Browsing not display?
Verify that they are not within the scope of the dynamically assigned DHCP addresses.
The ICMP protocol.
Migrates EFS encrypted files?
Suggested Sites

16. How does Transparent Caching lead to improved end-user response times and decreased bandwidth consumption over the WAN links to the server?
Distributed Cache mode. In this mode - local Windows 7 clients keep a copy of the content and make it available to other authorized clients that request the same data. This eliminates the need to have a server in the branch office. However - unlike H
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.
By caching reads to remote files over a slow network in the Offline Files (CSC) cache. Subsequent reads to the same file are then satisfied from the client (cache) after verifying the integrity of the cached copy.
Conditional forward

17. How do you ping the IPV6 address of a remote computer?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

18. What is DHCP conflict detection?
The DHCP server will ping an ip address before assigning it.
You setup one the DHCP server with the same option settings and non-overlapping scopes. Make sure to duplicate any reservations.
dynamic drives
A feature that regularly creates and saves information about your computer's system files and settings. System protection also saves previous versions of files that you've modified. It saves these files in restore points - which are created just befo

19. What does running network monitor in PMode do?
It which enables content from file and Web servers on a wide area network (WAN) to be cached on computers at a local branch office. BranchCache can improve application response time and reduce WAN traffic. Cached content can either be distributed acr
If you are logged in as an administrator you can shrink an existing partition or volume to create unallocated disk space - from which you can create a new partition or volume. You can shrink a volume even on a Basic Disk.
Use it to can backup certificates to a .PFX file that is password protected.
Promiscuous mode allows you to monitor another machine without installing network monitor on the PC you are trying to monitor.

20. How do you have a Firewall rule apply only to a specific computer?
Deploy a secondary zone.
You can upgrade to a more advanced edition of Windows 7—say from Home Premium to Ultimate and take advantage of extra features while keeping your current programs - files - and settings intact.
All Programs - Windows Virtual PC - Windows XP Mode Applications. To run your application directly from the Windows 7 desktop - just go to your Start menu.
Create a Custom Rule. By default Predefined Firewall Rules apply to all computers sending network traffic.

21. Where are Applocker policies are configured?
It is a command-line tool which relies on Windows Remote Management (WinRM) to execute remote commands. The basic syntax for WinRS commands is as follows: winrs -r:target command - where target is the name (NetBIOS or FQDN) of the remote computer tha
Through a GPO under Application Control Policies in the Computer Security Settings Node.
Use the Cipher.exe command line tool.
IN the WindowsUpdateClient log in the system log portion of event viewer.

22. What is a split tunnel VPN?
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".
Extensive Authentication Protocol used in PPP authentication.
Take the ip address and use the AND command on the calculator to AND the ip address and the subnet. NOTE: AND each octet separately. Then AND the gateway and the subnet. If the AND results are the same you are on the same subnet.
IPV4 and IPV6

23. How should EFS files should be recovered?
By an EFS Data Recovery Agent. If the computer is in a workgroup and the user has forgotten their password - the user should recover their own password with a Password Reset Disk in order to retain access to their encrypted files. If the administrato
Shaking (quickly dragging back and forth) a window minimizes all other windows. Shaking it again brings them back.
Install NAP on the computer with the DHCP service.Configure NAP as a RADIUS proxy and forward connection requests to the RADIUS server.
It designates an authoritative DNS server - not the soa record.

24. What extensions is Firewall rules can be exported and imported?
By running the Update Status summary report.
To perform very fast searches of the most common files on your computer. The easiest way to add something to the index is to include a folder in a library. When you do that - the content in that folder is automatically indexed.
4 (bits 49 - 52) /52 Allows for 16 regions.
A .WFW file

25. What protocol does NAP enforce when used in 802.1x authentication?
A type of port forwarding that allows public network computers on a Private network through nat devises.
IPSEC
It contains the necessary tools and documentation to evaluate and mitigate application compatibility issues before deploying Windows 7 - Windows Vista - a Windows Update - or a new version of Windows Internet Explorer in your environment.
EAP protocol.

26. How do you configure IPSEC between two computers?
By the RRAS manager or from the command line. For the subnet you can either use the / command or the octet subnet. Example: Route -p add 192.168.1.0/24 192.168.1.1
Use the Cipher.exe command line tool.
Conditional forward
Use the Advanced Firewall to define Connection Security Rules.

27. How do you block all traffic for a specific port in windows firewall?
ISATAP - Teredo and 6to4
Configure a firewall rule to the specific port and block all connections.
Windows 7 Ultimate.
driveletter:\\WindowsImageBackup\

28. What does User Rights policy governs?
Extensive Authentication Protocol used in PPP authentication.
A LAN Router only or a LAN to WAN Router
Netsh add dnsserver. Example netsh interface ipv4 add dnsserver name="Local Area Connection" 192.168.0.1 index=3
Who can shutdown a computer

29. Where do you get the USMT?
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
Setup a GlobalNames zone.
Comes with the Windows Automated Installation Kit (WAIK)
A scheduled task that runs by default collecting information for the Reliability monitor. If disabled it must reenabled manually from the task scheduler mmc snapin.

30. What is Optimize for Consistency polling mode do?
DHCP server cannot assign an ip address
The DFS service attempts to keep the domain based namespace highly consistent by polling the pcd emulator after the namespace changes. This bypasses the needing to wait for the ad replication to update the namespace object. This can increase load on
A CA users trust or they will get error messages when trying to securely access a web site. They can avoid the error by installing the CA certificate to the Trusted Root Certificate Store.
WSUS server configuration information - Metadata describing what each update is for - and general information about clients - updates and interaction.

31. You can configure ____________ in group policy.
Yes
Windows Vista - Window 7 and Server 2008.
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.
DNS suffix search lists

32. What happens when 3rd party vendors create a new driver?
Modify/Create a GPO
They relay the status on polices to the Security center for NAP to validate the system to use the network.
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n
They can place quotas on folders/volumes - activity screen files - and generate comprehensive storage reports. This assists in not only monitoring existing resource but helping on future planning.

33. What is a WSUS server?
Creates a bootable CD that runs the Windows Recovery Environment (WRE)
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
WIndows Update Server
To deploy the policy and understand its impact before enforcing it.

34. Use ocsetup instead of servermanagercmd.exe _________.
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.
A feature that regularly creates and saves information about your computer's system files and settings. System protection also saves previous versions of files that you've modified. It saves these files in restore points - which are created just befo
On a core server
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.

35. What is an example of a rule based on file attributes derived from the digital signature?
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
By either using WSUS management console (server side targeting) or GPO (client side targeting).
Yes - This involves picking the user certificate of the user you are sharing the file with. If that user does not already have a preinstalled certificate - then have them logon and encrypt a file for the first time and EFS will autogenerate a new cer
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.

36. How do you setup Windows 7 setup to run unattended?
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.
To display friendly labels to capture packet address headers.
Also known as root scalability mode. Allows organizations with more than 16 namespace servers use consistency mode. They poll the nearest dc every hour instead of the pdc emulator. This reduces network traffic to the pdc emulator but clients might ha

37. RRAS can be configured both in ______________.
A user to submit a print job to a printer and manage their own print jobs through the "Manage Documents" permission granted to the Creator Owners Group. If you grant a user "Manage Documents" - then they can manage ALL jobs submitted to that printer.
IPV4 and IPV6
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.
Use it to can backup certificates to a .PFX file that is password protected.

38. How do you route IPV6 traffic on your private network?
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
Use IPV6 Unique Local Addresses.
For example - you can create a rule that allows all Windows processes to run except Registry Editor (Regedit.exe).
WINRM QUICKCONFIG.

39. What does Credential Manager allows you to store?
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol
Who can shutdown a computer
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.
Run scripts

40. How do you setup a DHCP server for redundancy?
You setup one the DHCP server with the same option settings and non-overlapping scopes. Make sure to duplicate any reservations.
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
It governs remote access and a user must meet the conditions of at least one of the policies.
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.

41. IPV6 is _____ on Windows 2000
Yes - This involves picking the user certificate of the user you are sharing the file with. If that user does not already have a preinstalled certificate - then have them logon and encrypt a file for the first time and EFS will autogenerate a new cer
Conditional forward
Not supported
Use Safe Mode and then roll back the driver if it was recently updated.

42. What is the benifit of create a fixed size VHD instead of a dynamically expanding VHD file?
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
You can upgrade to a more advanced edition of Windows 7—say from Home Premium to Ultimate and take advantage of extra features while keeping your current programs - files - and settings intact.
It improves performance

43. What is WPA-EAP?
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
Use SYNC Center
Either from wbadmin or windows server backup.
WPA-Enterprise (radius authentication)

44. If you wanted to encrypt the connection between a client PC and the WSUS server what would you use?
It is a advertisement of a service. The record is configured with the service provided - a port number and weight?
SSL
It is a network health policy defines the minumum level of client health required to connect to the network.
Suggested Sites

45. What is terminal server network level authentication?
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
It contains the necessary tools and documentation to evaluate and mitigate application compatibility issues before deploying Windows 7 - Windows Vista - a Windows Update - or a new version of Windows Internet Explorer in your environment.
Turn off the Log Spooler event on a print server.

46. What does DISM /UNMOUNT-WIM /COMMIT do?
Enforce IPSEC on the network
If your computer is running slowly or isn't working properly - you can use System Restore to return your computer's system files and settings to an earlier point in time using a restore point. For more information about System Restore - see System Re
To will ensure the clients download the appropriate printer driver.
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back

47. What needs to be enabled for smart card logon?
L2TP/IPSEC with EAP-TLS.
No they are disabled
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
By either using WSUS management console (server side targeting) or GPO (client side targeting).

48. How do you delegate permissions to modify a specific DNS zone?
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.
IPV4 and IPV6
Delegate permission by configuring the dacl of the zone file.
Windows 7 Professional.

49. How many bits are in the site subnet?
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.
WPA-Enterprise (radius authentication)
Clients establish an IPsec tunnel for the IPv6 traffic to the DirectAccess server - which acts as a gateway to the intranet. The DirectAccess client establishes two IPsec tunnels: Psec Encapsulating Security Payload (ESP) tunnel and IPsec ESP tunnel.
On a core server

50. What does NETSH BRANCHCACHE FLUSH do?
Clear the content being cached
WECUTIL QC
Forward to another DNS server
Some information—such as cookies and temporary Internet files—so that the webpages you visit will work correctly. However - at the end of your InPrivate Browsing session - this information is discarded.